@amalgm/channels 0.1.1 → 0.1.2

package/PURPOSE.md

@@ -2,30 +2,40 @@
 
 ## Purpose
 
-Channels is the sole owner of delivering a message from Amalgm to the current
-user. A caller supplies content and an optional channel preference; Channels
-resolves the authenticated user's destination, persists one durable delivery,
-and hands it to the configured provider. Callers never choose another user,
-handle provider credentials, or infer whether delivery happened from a network
-attempt.
+Channels is the sole owner of carrying discrete messages between an Amalgm
+user and external communication channels. An agent supplies content and a
+channel; Channels resolves that authenticated user's destination, persists one
+durable delivery, and hands it to the configured provider. A verified inbound
+provider event resolves one user, one channel thread, and one pinned computer,
+then waits durably until that computer admits it into the matching local Chat
+session. Callers never choose another user, handle provider credentials, or
+infer whether delivery happened from a network attempt.
 
-The SDK owns notification validation, idempotency, delivery state, and history.
-The HTTP API, MCP server, CLI, worker, and Fly host are adapters over that SDK.
-Supabase is the durable authority; providers are effects supplied by the host.
-The hosted service is its own deployable and does not run inside or depend on
-Amalgm Gateway.
+The SDK owns send validation, channel-thread identity, inbound admission,
+idempotency, leases, delivery state, and history. The HTTP API, MCP server,
+global CLI, machine runner, provider adapters, and Fly host are adapters over
+that SDK.
+Supabase is the durable authority only for provider delivery and inbound work
+that no computer has accepted yet. Chat sessions, transcripts, and agent
+execution stay on the pinned user's computer. The hosted service is its own
+deployable and does not run inside or depend on Amalgm Gateway.
 
 ## Axioms
 
-1. Every delivery belongs to exactly one authenticated user.
+1. Every user delivery and every accepted inbound message belongs to exactly
+   one authenticated user.
 2. A public send input never contains a user id, email address, phone number,
    provider credential, or other recipient coordinate.
 3. One idempotency key names at most one delivery for a user.
+   Provider retries use that delivery's globally unique id, never the caller's
+   user-scoped key.
 4. A provider attempt begins only after a durable, exclusively leased delivery
    exists; completion is accepted only from that lease.
 5. Failed and expired leases remain visible and retryable. They are never
    reported as delivered.
-6. Supabase is authoritative for pending work and permanent delivery history.
+6. Supabase is authoritative for pending provider work, pending inbound work,
+   channel-thread routing, and permanent delivery history; it is never a Chat
+   transcript store.
 7. Provider responses are reduced to bounded identifiers and safe errors before
    persistence; secrets and recipient coordinates never enter public records.
 8. The SDK is the behavior. HTTP, MCP, CLI, workers, and provider adapters stay
@@ -36,6 +46,27 @@ Amalgm Gateway.
     or deliver its work.
 11. The configured public origin, never forwarding headers, reconstructs the
     DPoP request URL behind the Fly proxy.
+12. One Channels renderer derives the HTML email and plaintext fallback from
+    the same persisted message; provider adapters cannot invent presentation.
+13. One channel thread names exactly one Chat session and one pinned computer.
+    A new external thread creates a new session; every reply in that thread
+    reuses it.
+14. A provider webhook is authenticated and durably deduplicated before it can
+    create work. Inbound account identity additionally requires an aligned
+    DMARC pass for the visible sender; subjects never authenticate or route.
+15. An inbound envelope is complete offline state. A machine may claim only
+    envelopes pinned to its DPoP-bound computer identity, and hosted message
+    content is removed after the local Chat turn is durably admitted.
+16. Agent text is not an outbound message. Only an explicit Channels send call
+    creates a delivery, and session identity is supplied by the trusted local
+    Chat relay rather than by the model.
+17. Machine wakeups are content-free, cross-host broadcasts that accelerate
+    claims but never own correctness. Connect and reconnect always reconcile
+    the durable inbox.
+18. Provider acceptance means sent, not delivered. Provider events alone move
+    a sent delivery to delivered or failed.
+19. The global CLI projects the same command definitions as MCP and reaches
+    hosted effects only through Shell's authenticated loopback MCP route.
 
 ## Tree
 
@@ -43,9 +74,13 @@ Amalgm Gateway.
 src/contract.ts       public SDK shapes
 src/service.ts        validation and user-bound behavior
 src/worker.ts         lease-to-provider delivery pump
+src/inbox/            machine claim, acceptance, and event-driven drain
 src/http.ts           HTTP adapter
 src/client.ts         browser/host API client
 src/mcp.ts            agent adapter
+src/command-surface.ts shared MCP and CLI command definitions
+src/cli/              global Shell-loopback command adapter
+src/email/            canonical presentation, threading, and inbound rules
 host/                 Supabase, auth, provider, server, and Fly composition
 supabase/migrations/  durable schema and atomic RPCs
 skills/channels/      agent usage guidance

package/README.md

@@ -1,16 +1,74 @@
 # @amalgm/channels
 
-The SDK and standalone hosted service for sending notifications to the current
-Amalgm user.
+Channels carries deliberate, discrete messages between an Amalgm user and
+external communication channels. Email is the first bidirectional channel.
+
+An agent does its work locally and explicitly calls one send command with the
+text it wants the user to receive. Ordinary assistant output is never copied,
+streamed, or inferred into an external message.
 
 ```ts
 const channels = service.for({ userId, scopes: ['channels:send'] });
-await channels.notify({ message: 'Call Mom', idempotencyKey: runId });
+await channels.send({
+  channel: 'email',
+  title: 'Research complete',
+  message: 'The report is ready.',
+  idempotencyKey: runId,
+});
+```
+
+## Email behavior
+
+- A new email thread creates one new local Chat session.
+- Every reply in that email thread resumes the same session.
+- The first message pins the thread to the user's last-used computer.
+- If that computer is offline, the inbound message waits durably and drains in
+  order when Shell reconnects. The user does not need to resend it.
+- Once the machine durably admits the turn, hosted message content is erased.
+- Agent replies are separate sends through `amalgm_channels_send`; partial
+  assistant output never leaves the machine.
+
+Production mail is sent as `Amalgm <emails@amalgm.ai>`. Replies use an opaque,
+signed address on `reply.amalgm.ai`, so threading does not depend on a subject
+line or a guess about the user's latest session.
+
+## One command surface
+
+The SDK owns the send command definition, validation, and behavior. MCP and
+both CLI entry points project that same definition:
+
+```bash
+amalgm channels send --input '{
+  "channel": "email",
+  "title": "Finished",
+  "message": "The work is complete.",
+  "idempotency_key": "run-123"
+}'
+
+amalgm-channels send --file message.json
+printf '%s' '{"channel":"email","message":"Done"}' |
+  amalgm channels send --stdin
 ```
 
-Use `createChannelsApi` for HTTP, `createChannelsMcpServer` for agents, and
-`createChannelsHost` for the Fly service. See [PURPOSE.md](./PURPOSE.md) for the
-ownership and security laws.
+The global `amalgm channels` command discovers the running Shell and uses its
+private loopback MCP route and local admission token. It never exports a hosted
+access token or the machine's DPoP key. The recipient is always the signed-in
+user; no command accepts an email address or user id.
+
+## Composition
+
+- `createChannelsApi` exposes the HTTP adapter.
+- `createChannelsMcpServer` exposes the agent tool.
+- `createChannelsCommands` is the reusable MCP/CLI command surface.
+- `createChannelMachineRunner` drains held inbound work on Shell.
+- `createChannelsHost` composes the Fly service.
+
+Supabase stores only provider delivery history, thread routing, and inbound
+work not yet admitted by a computer. Chat sessions, transcripts, and execution
+remain on the user's machine. See [PURPOSE.md](./PURPOSE.md) for the governing
+purpose and invariants.
+
+## Verify
 
 ```bash
 npm run verify

package/dist/host/auth.js

@@ -17,9 +17,12 @@ export function createChannelsAuthenticator(options) {
                 scopes: Object.freeze(['channels:read', 'channels:send']),
             });
         }
-        const required = request.method.toUpperCase() === 'POST'
-            ? ['channels:send']
-            : ['channels:read'];
+        const pathname = new URL(request.url).pathname;
+        const required = pathname.startsWith('/v1/machine/')
+            ? ['channels:receive']
+            : request.method.toUpperCase() === 'POST'
+                ? ['channels:send']
+                : ['channels:read'];
         const principal = await authorizeMachineResource({
             authorization,
             dpop: request.headers.get('dpop'),
@@ -31,6 +34,7 @@ export function createChannelsAuthenticator(options) {
         }, ports);
         return Object.freeze({
             userId: principal.userId,
+            computerId: principal.computerId,
             scopes: principal.scopes.filter((scope) => scope.startsWith('channels:')),
         });
     };

package/dist/host/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../host/auth.ts"],"names":[],"mappings":"AACA,OAAO,EACL,wBAAwB,GAGzB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,qBAAqB,EACrB,SAAS,EACT,SAAS,GAEV,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,MAAM,UAAU,2BAA2B,CAAC,OAI3C;IACC,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,wBAAwB,CAAC,CAAC,CAAC;IACpF,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAE3C,OAAO,KAAK,EAAE,OAAgB,EAA6B,EAAE;QAC3D,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC3D,IAAI,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1D,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,aAAa,CAAC,WAAW,EAAE,2BAA2B,CAAC,CAAC;YACzG,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,EAAE,eAAe,CAAU,CAAC;aACnE,CAAC,CAAC;QACL,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM;YACtD,CAAC,CAAC,CAAC,eAAe,CAAU;YAC5B,CAAC,CAAC,CAAC,eAAe,CAAU,CAAC;QAC/B,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC;YAC/C,aAAa;YACb,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YACjC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,iBAAiB;YAC3B,cAAc,EAAE,QAAQ;SACzB,EAAE,KAAK,CAAC,CAAC;QACV,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAyB,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;SACjG,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,OAAyE,EACzE,IAA2C;IAE3C,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAChE,KAAK,CAAC,iBAAiB,CAAC,KAAK;YAC3B,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE;gBAC5C,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,QAAQ,EAAE,iBAAiB;gBAC3B,UAAU,EAAE,CAAC,OAAO,CAAC;aACtB,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,eAAe,EAAE,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QACxE,CAAC;QACD,KAAK,CAAC,eAAe,CAAC,KAAK;YACzB,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;YAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,GAAsB,CAAC;YAC1C,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAC1D,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE;gBACrE,UAAU,EAAE,CAAC,OAAO,CAAC;gBACrB,GAAG,EAAE,UAAU;aAChB,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,eAAe,EAAE,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QACxE,CAAC;QACD,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,sBAAsB,CAAC,GAAU,EAAE,QAAQ,CAAC;QACpE,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;QACxF,KAAK,CAAC,YAAY,CAAC,aAAa,EAAE,GAAG;YACnC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,kCAAkC,EAAE;gBAC5E,gBAAgB,EAAE,aAAa;gBAC/B,KAAK,EAAE,GAAG;aACX,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,KAAK;gBAAE,MAAM,MAAM,CAAC,KAAK,CAAC;YACrC,OAAO,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC;QAC9B,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,aAAqB,EACrB,IAAY;IAEZ,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;AAChD,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../host/auth.ts"],"names":[],"mappings":"AACA,OAAO,EACL,wBAAwB,GAGzB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,qBAAqB,EACrB,SAAS,EACT,SAAS,GAEV,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,MAAM,UAAU,2BAA2B,CAAC,OAI3C;IACC,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,wBAAwB,CAAC,CAAC,CAAC;IACpF,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAE3C,OAAO,KAAK,EAAE,OAAgB,EAA6B,EAAE;QAC3D,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC3D,IAAI,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1D,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,aAAa,CAAC,WAAW,EAAE,2BAA2B,CAAC,CAAC;YACzG,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,EAAE,eAAe,CAAU,CAAC;aACnE,CAAC,CAAC;QACL,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC/C,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC;YAClD,CAAC,CAAC,CAAC,kBAAkB,CAAU;YAC/B,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM;gBACvC,CAAC,CAAC,CAAC,eAAe,CAAU;gBAC5B,CAAC,CAAC,CAAC,eAAe,CAAU,CAAC;QACjC,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC;YAC/C,aAAa;YACb,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YACjC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,iBAAiB;YAC3B,cAAc,EAAE,QAAQ;SACzB,EAAE,KAAK,CAAC,CAAC;QACV,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAyB,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;SACjG,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,OAAyE,EACzE,IAA2C;IAE3C,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAChE,KAAK,CAAC,iBAAiB,CAAC,KAAK;YAC3B,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE;gBAC5C,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,QAAQ,EAAE,iBAAiB;gBAC3B,UAAU,EAAE,CAAC,OAAO,CAAC;aACtB,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,eAAe,EAAE,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QACxE,CAAC;QACD,KAAK,CAAC,eAAe,CAAC,KAAK;YACzB,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;YAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,GAAsB,CAAC;YAC1C,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAC1D,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE;gBACrE,UAAU,EAAE,CAAC,OAAO,CAAC;gBACrB,GAAG,EAAE,UAAU;aAChB,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,eAAe,EAAE,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QACxE,CAAC;QACD,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,sBAAsB,CAAC,GAAU,EAAE,QAAQ,CAAC;QACpE,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;QACxF,KAAK,CAAC,YAAY,CAAC,aAAa,EAAE,GAAG;YACnC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,kCAAkC,EAAE;gBAC5E,gBAAgB,EAAE,aAAa;gBAC/B,KAAK,EAAE,GAAG;aACX,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,KAAK;gBAAE,MAAM,MAAM,CAAC,KAAK,CAAC;YACrC,OAAO,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC;QAC9B,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,aAAqB,EACrB,IAAY;IAEZ,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;AAChD,CAAC"}

package/dist/host/config.d.ts

@@ -5,7 +5,9 @@ export interface ChannelsHostConfig {
     readonly supabaseServiceRoleKey: string;
     readonly authorizationIssuer: string;
     readonly resendApiKey: string;
+    readonly resendWebhookSecret: string;
     readonly emailFrom: string;
-    readonly pollIntervalMs: number;
+    readonly emailInbox: string;
+    readonly emailThreadSecret: string;
 }
 export declare function channelsHostConfig(env?: Readonly<Record<string, string | undefined>>): ChannelsHostConfig;

package/dist/host/config.js

@@ -6,8 +6,10 @@ export function channelsHostConfig(env = process.env) {
         supabaseServiceRoleKey: required(env.SUPABASE_SERVICE_ROLE_KEY, 'SUPABASE_SERVICE_ROLE_KEY'),
         authorizationIssuer: httpsUrl(env.AMALGM_AUTHORIZATION_ISSUER, 'AMALGM_AUTHORIZATION_ISSUER'),
         resendApiKey: required(env.RESEND_API_KEY, 'RESEND_API_KEY'),
+        resendWebhookSecret: required(env.RESEND_WEBHOOK_SECRET, 'RESEND_WEBHOOK_SECRET'),
         emailFrom: required(env.CHANNELS_EMAIL_FROM, 'CHANNELS_EMAIL_FROM'),
-        pollIntervalMs: integer(env.CHANNELS_POLL_INTERVAL_MS, 1_000, 250, 60_000),
+        emailInbox: required(env.CHANNELS_EMAIL_INBOX, 'CHANNELS_EMAIL_INBOX'),
+        emailThreadSecret: required(env.CHANNELS_EMAIL_THREAD_SECRET, 'CHANNELS_EMAIL_THREAD_SECRET'),
     });
 }
 function required(value, name) {

package/dist/host/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../host/config.ts"],"names":[],"mappings":"AAWA,MAAM,UAAU,kBAAkB,CAChC,MAAoD,OAAO,CAAC,GAAG;IAE/D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC;QACxC,YAAY,EAAE,QAAQ,CAAC,GAAG,CAAC,qBAAqB,EAAE,uBAAuB,CAAC;QAC1E,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,wBAAwB,EAAE,cAAc,CAAC;QACvF,sBAAsB,EAAE,QAAQ,CAAC,GAAG,CAAC,yBAAyB,EAAE,2BAA2B,CAAC;QAC5F,mBAAmB,EAAE,QAAQ,CAAC,GAAG,CAAC,2BAA2B,EAAE,6BAA6B,CAAC;QAC7F,YAAY,EAAE,QAAQ,CAAC,GAAG,CAAC,cAAc,EAAE,gBAAgB,CAAC;QAC5D,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,mBAAmB,EAAE,qBAAqB,CAAC;QACnE,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC;KAC3E,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,KAAyB,EAAE,IAAY;IACvD,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAyB,EAAE,IAAY;IACvD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,CAAC;IACjF,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,iBAAiB,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,OAAO,CACd,KAAyB,EACzB,QAAgB,EAChB,OAAe,EACf,OAAe;IAEf,MAAM,MAAM,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,OAAO,IAAI,MAAM,GAAG,OAAO,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,4BAA4B,OAAO,OAAO,OAAO,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../host/config.ts"],"names":[],"mappings":"AAaA,MAAM,UAAU,kBAAkB,CAChC,MAAoD,OAAO,CAAC,GAAG;IAE/D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC;QACxC,YAAY,EAAE,QAAQ,CAAC,GAAG,CAAC,qBAAqB,EAAE,uBAAuB,CAAC;QAC1E,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,wBAAwB,EAAE,cAAc,CAAC;QACvF,sBAAsB,EAAE,QAAQ,CAAC,GAAG,CAAC,yBAAyB,EAAE,2BAA2B,CAAC;QAC5F,mBAAmB,EAAE,QAAQ,CAAC,GAAG,CAAC,2BAA2B,EAAE,6BAA6B,CAAC;QAC7F,YAAY,EAAE,QAAQ,CAAC,GAAG,CAAC,cAAc,EAAE,gBAAgB,CAAC;QAC5D,mBAAmB,EAAE,QAAQ,CAAC,GAAG,CAAC,qBAAqB,EAAE,uBAAuB,CAAC;QACjF,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,mBAAmB,EAAE,qBAAqB,CAAC;QACnE,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,oBAAoB,EAAE,sBAAsB,CAAC;QACtE,iBAAiB,EAAE,QAAQ,CAAC,GAAG,CAAC,4BAA4B,EAAE,8BAA8B,CAAC;KAC9F,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,KAAyB,EAAE,IAAY;IACvD,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAyB,EAAE,IAAY;IACvD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,CAAC;IACjF,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,iBAAiB,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,OAAO,CACd,KAAyB,EACzB,QAAgB,EAChB,OAAe,EACf,OAAe;IAEf,MAAM,MAAM,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,OAAO,IAAI,MAAM,GAAG,OAAO,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,4BAA4B,OAAO,OAAO,OAAO,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/host/inbox-repository.d.ts

@@ -0,0 +1,10 @@
+import type { SupabaseClient } from '@supabase/supabase-js';
+import type { ClaimedInboundMessage, InboundLease, MachineInboxRepository } from '../src/inbox/contract.js';
+export declare class SupabaseMachineInboxRepository implements MachineInboxRepository {
+    #private;
+    private readonly client;
+    constructor(client: SupabaseClient);
+    claim(userId: string, computerId: string, limit: number, leaseSeconds: number): Promise<readonly ClaimedInboundMessage[]>;
+    accept(userId: string, computerId: string, message: InboundLease, now: Date): Promise<boolean>;
+    release(userId: string, computerId: string, message: InboundLease, error: string, now: Date): Promise<boolean>;
+}

package/dist/host/inbox-repository.js

@@ -0,0 +1,57 @@
+import { ChannelsError } from '../src/errors.js';
+export class SupabaseMachineInboxRepository {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    async claim(userId, computerId, limit, leaseSeconds) {
+        const rows = await this.#rpc('claim_amalgm_channel_inbound', {
+            p_user_id: userId,
+            p_computer_id: computerId,
+            p_limit: limit,
+            p_lease_seconds: leaseSeconds,
+        });
+        return rows.map((row) => Object.freeze({
+            id: text(row.id),
+            channel: 'email',
+            threadId: text(row.thread_id),
+            sessionId: text(row.session_id),
+            startsSession: row.starts_session === true,
+            subject: text(row.subject),
+            message: text(row.message),
+            providerMessageId: text(row.provider_message_id),
+            receivedAt: timestamp(row.received_at),
+            leaseToken: text(row.lease_token),
+            attempts: number(row.attempts),
+        }));
+    }
+    accept(userId, computerId, message, now) {
+        return this.#rpc('accept_amalgm_channel_inbound', {
+            p_user_id: userId,
+            p_computer_id: computerId,
+            p_message_id: message.id,
+            p_lease_token: message.leaseToken,
+            p_now: now.toISOString(),
+        });
+    }
+    release(userId, computerId, message, error, now) {
+        return this.#rpc('release_amalgm_channel_inbound', {
+            p_user_id: userId,
+            p_computer_id: computerId,
+            p_message_id: message.id,
+            p_lease_token: message.leaseToken,
+            p_error: error,
+            p_now: now.toISOString(),
+        });
+    }
+    async #rpc(name, arguments_) {
+        const result = await this.client.rpc(name, arguments_);
+        if (result.error)
+            throw new ChannelsError('internal', `Channels inbox storage failed: ${result.error.message}`);
+        return result.data;
+    }
+}
+const text = (value) => typeof value === 'string' ? value : String(value ?? '');
+const number = (value) => Number(value) || 0;
+const timestamp = (value) => new Date(String(value)).toISOString();
+//# sourceMappingURL=inbox-repository.js.map

package/dist/host/inbox-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox-repository.js","sourceRoot":"","sources":["../../host/inbox-repository.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAIjD,MAAM,OAAO,8BAA8B;IACZ;IAA7B,YAA6B,MAAsB;QAAtB,WAAM,GAAN,MAAM,CAAgB;IAAG,CAAC;IAEvD,KAAK,CAAC,KAAK,CACT,MAAc,EACd,UAAkB,EAClB,KAAa,EACb,YAAoB;QAEpB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAQ,8BAA8B,EAAE;YAClE,SAAS,EAAE,MAAM;YACjB,aAAa,EAAE,UAAU;YACzB,OAAO,EAAE,KAAK;YACd,eAAe,EAAE,YAAY;SAC9B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;YACrC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAChB,OAAO,EAAE,OAAgB;YACzB,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAC7B,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;YAC/B,aAAa,EAAE,GAAG,CAAC,cAAc,KAAK,IAAI;YAC1C,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;YAC1B,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;YAC1B,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAChD,UAAU,EAAE,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC;YACtC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;YACjC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;SAC/B,CAAC,CAAC,CAAC;IACN,CAAC;IAED,MAAM,CAAC,MAAc,EAAE,UAAkB,EAAE,OAAqB,EAAE,GAAS;QACzE,OAAO,IAAI,CAAC,IAAI,CAAC,+BAA+B,EAAE;YAChD,SAAS,EAAE,MAAM;YACjB,aAAa,EAAE,UAAU;YACzB,YAAY,EAAE,OAAO,CAAC,EAAE;YACxB,aAAa,EAAE,OAAO,CAAC,UAAU;YACjC,KAAK,EAAE,GAAG,CAAC,WAAW,EAAE;SACzB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CACL,MAAc,EACd,UAAkB,EAClB,OAAqB,EACrB,KAAa,EACb,GAAS;QAET,OAAO,IAAI,CAAC,IAAI,CAAC,gCAAgC,EAAE;YACjD,SAAS,EAAE,MAAM;YACjB,aAAa,EAAE,UAAU;YACzB,YAAY,EAAE,OAAO,CAAC,EAAE;YACxB,aAAa,EAAE,OAAO,CAAC,UAAU;YACjC,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,GAAG,CAAC,WAAW,EAAE;SACzB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CAAI,IAAY,EAAE,UAAmC;QAC7D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACvD,IAAI,MAAM,CAAC,KAAK;YAAE,MAAM,IAAI,aAAa,CAAC,UAAU,EAAE,kCAAkC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAChH,OAAO,MAAM,CAAC,IAAS,CAAC;IAC1B,CAAC;CACF;AAED,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;AACzF,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACtD,MAAM,SAAS,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC"}

package/dist/host/index.d.ts

@@ -4,3 +4,7 @@ export * from './recipient.js';
 export * from './repository.js';
 export * from './resend.js';
 export * from './server.js';
+export * from './wakeups.js';
+export * from './inbox-repository.js';
+export * from './ingress-repository.js';
+export * from './resend-webhook.js';

package/dist/host/index.js

@@ -4,4 +4,8 @@ export * from './recipient.js';
 export * from './repository.js';
 export * from './resend.js';
 export * from './server.js';
+export * from './wakeups.js';
+export * from './inbox-repository.js';
+export * from './ingress-repository.js';
+export * from './resend-webhook.js';
 //# sourceMappingURL=index.js.map

package/dist/host/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../host/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../host/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC"}

package/dist/host/ingress-repository.d.ts

@@ -0,0 +1,10 @@
+import type { SupabaseClient } from '@supabase/supabase-js';
+import type { EmailIngressRepository, InboundAdmission, NormalizedReceivedEmail, ProviderEmailEvent } from '../src/email/inbound.js';
+export declare class SupabaseEmailIngressRepository implements EmailIngressRepository {
+    #private;
+    private readonly client;
+    constructor(client: SupabaseClient);
+    admit(input: NormalizedReceivedEmail): Promise<InboundAdmission>;
+    recordNotice(recordId: string, providerId: string, now: Date): Promise<boolean>;
+    applyProviderEvent(input: ProviderEmailEvent): Promise<boolean>;
+}

package/dist/host/ingress-repository.js

@@ -0,0 +1,61 @@
+import { ChannelsError } from '../src/errors.js';
+export class SupabaseEmailIngressRepository {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    async admit(input) {
+        const row = await this.#rpc('admit_amalgm_channel_email', { p_email: input });
+        const kind = text(row.kind);
+        if (kind === 'accepted') {
+            return Object.freeze({
+                kind,
+                userId: text(row.user_id),
+                messageId: text(row.message_id),
+                threadId: text(row.thread_id),
+                sessionId: text(row.session_id),
+                targetComputerId: text(row.target_computer_id),
+                targetComputerName: text(row.target_computer_name),
+                targetOnline: row.target_online === true,
+                senderEmail: text(row.sender_email),
+                subject: text(row.subject),
+                providerMessageId: text(row.provider_message_id),
+                references: strings(row.references),
+            });
+        }
+        if (kind === 'unknown_sender' || kind === 'no_computer') {
+            return Object.freeze({
+                kind,
+                recordId: text(row.record_id),
+                senderEmail: text(row.sender_email),
+                subject: text(row.subject),
+                providerMessageId: text(row.provider_message_id),
+                references: strings(row.references),
+            });
+        }
+        if (kind === 'duplicate')
+            return Object.freeze({ kind, recordId: text(row.record_id) });
+        if (kind === 'ignored')
+            return Object.freeze({ kind, reason: text(row.reason) });
+        throw new ChannelsError('internal', 'Channels ingress returned an unknown admission');
+    }
+    recordNotice(recordId, providerId, now) {
+        return this.#rpc('record_amalgm_channel_inbound_notice', {
+            p_message_id: recordId,
+            p_provider_id: providerId,
+            p_now: now.toISOString(),
+        });
+    }
+    applyProviderEvent(input) {
+        return this.#rpc('apply_amalgm_channel_provider_event', { p_event: input });
+    }
+    async #rpc(name, arguments_) {
+        const result = await this.client.rpc(name, arguments_);
+        if (result.error)
+            throw new ChannelsError('internal', `Channels ingress storage failed: ${result.error.message}`);
+        return result.data;
+    }
+}
+const text = (value) => typeof value === 'string' ? value : String(value ?? '');
+const strings = (value) => Array.isArray(value) ? value.map(text).filter(Boolean) : [];
+//# sourceMappingURL=ingress-repository.js.map

package/dist/host/ingress-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingress-repository.js","sourceRoot":"","sources":["../../host/ingress-repository.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAIjD,MAAM,OAAO,8BAA8B;IACZ;IAA7B,YAA6B,MAAsB;QAAtB,WAAM,GAAN,MAAM,CAAgB;IAAG,CAAC;IAEvD,KAAK,CAAC,KAAK,CAAC,KAA8B;QACxC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAM,4BAA4B,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACnF,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,IAAI;gBACJ,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBACzB,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;gBAC/B,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;gBAC7B,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;gBAC/B,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC;gBAC9C,kBAAkB,EAAE,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC;gBAClD,YAAY,EAAE,GAAG,CAAC,aAAa,KAAK,IAAI;gBACxC,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;gBACnC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBAC1B,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC;gBAChD,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;aACpC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,KAAK,gBAAgB,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;YACxD,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,IAAI;gBACJ,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;gBAC7B,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;gBACnC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBAC1B,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC;gBAChD,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;aACpC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,KAAK,WAAW;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACxF,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjF,MAAM,IAAI,aAAa,CAAC,UAAU,EAAE,gDAAgD,CAAC,CAAC;IACxF,CAAC;IAED,YAAY,CAAC,QAAgB,EAAE,UAAkB,EAAE,GAAS;QAC1D,OAAO,IAAI,CAAC,IAAI,CAAC,sCAAsC,EAAE;YACvD,YAAY,EAAE,QAAQ;YACtB,aAAa,EAAE,UAAU;YACzB,KAAK,EAAE,GAAG,CAAC,WAAW,EAAE;SACzB,CAAC,CAAC;IACL,CAAC;IAED,kBAAkB,CAAC,KAAyB;QAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,qCAAqC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,IAAI,CAAI,IAAY,EAAE,UAAmC;QAC7D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACvD,IAAI,MAAM,CAAC,KAAK;YAAE,MAAM,IAAI,aAAa,CAAC,UAAU,EAAE,oCAAoC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAClH,OAAO,MAAM,CAAC,IAAS,CAAC;IAC1B,CAAC;CACF;AAED,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;AACzF,MAAM,OAAO,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC"}

package/dist/host/main.js

@@ -2,32 +2,61 @@ import { createClient } from '@supabase/supabase-js';
 import { createChannelsApi } from '../src/http.js';
 import { createChannelsService } from '../src/service.js';
 import { ChannelsWorker } from '../src/worker.js';
+import { EmailIngress } from '../src/email/inbound.js';
+import { EmailThreadAddressing } from '../src/email/thread-token.js';
+import { MachineEventHub } from '../src/inbox/events.js';
+import { createMachineInboxService } from '../src/inbox/service.js';
 import { createChannelsAuthenticator } from './auth.js';
 import { channelsHostConfig } from './config.js';
 import { SupabaseRecipientDirectory } from './recipient.js';
 import { SupabaseDeliveryRepository } from './repository.js';
 import { ResendEmailProvider } from './resend.js';
 import { createChannelsHost } from './server.js';
+import { SupabaseMachineInboxRepository } from './inbox-repository.js';
+import { SupabaseEmailIngressRepository } from './ingress-repository.js';
+import { createResendWebhookApi } from './resend-webhook.js';
+import { HostedMachineWakeups } from './wakeups.js';
 const config = channelsHostConfig();
 const supabase = createClient(config.supabaseUrl, config.supabaseServiceRoleKey, {
     auth: { persistSession: false, autoRefreshToken: false },
 });
 const repository = new SupabaseDeliveryRepository(supabase);
-const worker = new ChannelsWorker(repository, new SupabaseRecipientDirectory(supabase), new ResendEmailProvider(config.resendApiKey, config.emailFrom), { log });
+const addressing = new EmailThreadAddressing(config.emailThreadSecret, config.emailInbox);
+const email = new ResendEmailProvider(config.resendApiKey, config.emailFrom);
+const worker = new ChannelsWorker(repository, new SupabaseRecipientDirectory(supabase), email, addressing, { log });
+const events = new MachineEventHub();
+const realtime = supabase.channel('amalgm-channels-work');
+const wakeups = new HostedMachineWakeups(events, realtime, log);
+const ingress = new EmailIngress(new SupabaseEmailIngressRepository(supabase), addressing);
 const api = createChannelsApi({
     service: createChannelsService(repository),
     authenticate: createChannelsAuthenticator({ issuer: config.authorizationIssuer, supabase }),
+    inbox: createMachineInboxService(new SupabaseMachineInboxRepository(supabase), events.stream),
 });
 const host = createChannelsHost({
     publicOrigin: config.publicOrigin,
     api,
+    webhookApi: createResendWebhookApi({
+        secret: config.resendWebhookSecret,
+        ingress,
+        email,
+        addressing,
+        wakeMachine: (userId, computerId) => wakeups.publish(userId, computerId),
+        apiKey: config.resendApiKey,
+    }),
     worker,
-    pollIntervalMs: config.pollIntervalMs,
     log,
 });
+realtime
+    .on('broadcast', { event: 'machine_wakeup' }, ({ payload }) => {
+    wakeups.receive(payload);
+})
+    .subscribe((status) => log('realtime.status', { status }));
 host.server.listen(config.port, '0.0.0.0', () => log('host.ready', { port: config.port }));
 for (const signal of ['SIGINT', 'SIGTERM']) {
-    process.once(signal, () => void host.close().finally(() => process.exit(0)));
+    process.once(signal, () => void supabase.removeChannel(realtime)
+        .then(() => host.close())
+        .finally(() => process.exit(0)));
 }
 function log(event, details = {}) {
     console.log(JSON.stringify({ service: 'amalgm-channels', event, ...details }));

package/dist/host/main.js.map

@@ -1 +1 @@
-{"version":3,"file":"main.js","sourceRoot":"","sources":["../../host/main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,2BAA2B,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;AACpC,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,sBAAsB,EAAE;IAC/E,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE;CACzD,CAAC,CAAC;AACH,MAAM,UAAU,GAAG,IAAI,0BAA0B,CAAC,QAAQ,CAAC,CAAC;AAC5D,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,UAAU,EACV,IAAI,0BAA0B,CAAC,QAAQ,CAAC,EACxC,IAAI,mBAAmB,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC,EAC9D,EAAE,GAAG,EAAE,CACR,CAAC;AACF,MAAM,GAAG,GAAG,iBAAiB,CAAC;IAC5B,OAAO,EAAE,qBAAqB,CAAC,UAAU,CAAC;IAC1C,YAAY,EAAE,2BAA2B,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,mBAAmB,EAAE,QAAQ,EAAE,CAAC;CAC5F,CAAC,CAAC;AACH,MAAM,IAAI,GAAG,kBAAkB,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC,YAAY;IACjC,GAAG;IACH,MAAM;IACN,cAAc,EAAE,MAAM,CAAC,cAAc;IACrC,GAAG;CACJ,CAAC,CAAC;AAEH,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AAC3F,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU,EAAE,CAAC;IACpD,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,GAAG,CAAC,KAAa,EAAE,UAA6C,EAAE;IACzE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC;AACjF,CAAC"}
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../host/main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,2BAA2B,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;AACpC,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,sBAAsB,EAAE;IAC/E,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE;CACzD,CAAC,CAAC;AACH,MAAM,UAAU,GAAG,IAAI,0BAA0B,CAAC,QAAQ,CAAC,CAAC;AAC5D,MAAM,UAAU,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;AAC1F,MAAM,KAAK,GAAG,IAAI,mBAAmB,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;AAC7E,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,UAAU,EACV,IAAI,0BAA0B,CAAC,QAAQ,CAAC,EACxC,KAAK,EACL,UAAU,EACV,EAAE,GAAG,EAAE,CACR,CAAC;AACF,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;AACrC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;AAC1D,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;AAChE,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,IAAI,8BAA8B,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC,CAAC;AAC3F,MAAM,GAAG,GAAG,iBAAiB,CAAC;IAC5B,OAAO,EAAE,qBAAqB,CAAC,UAAU,CAAC;IAC1C,YAAY,EAAE,2BAA2B,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,mBAAmB,EAAE,QAAQ,EAAE,CAAC;IAC3F,KAAK,EAAE,yBAAyB,CAAC,IAAI,8BAA8B,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;CAC9F,CAAC,CAAC;AACH,MAAM,IAAI,GAAG,kBAAkB,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC,YAAY;IACjC,GAAG;IACH,UAAU,EAAE,sBAAsB,CAAC;QACjC,MAAM,EAAE,MAAM,CAAC,mBAAmB;QAClC,OAAO;QACP,KAAK;QACL,UAAU;QACV,WAAW,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC;QACxE,MAAM,EAAE,MAAM,CAAC,YAAY;KAC5B,CAAC;IACF,MAAM;IACN,GAAG;CACJ,CAAC,CAAC;AAEH,QAAQ;KACL,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;IAC5D,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC,CAAC;KACD,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AAE7D,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AAC3F,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU,EAAE,CAAC;IACpD,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC;SAC7D,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;SACxB,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,GAAG,CAAC,KAAa,EAAE,UAA6C,EAAE;IACzE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC;AACjF,CAAC"}

package/dist/host/repository.d.ts

@@ -1,13 +1,14 @@
 import type { SupabaseClient } from '@supabase/supabase-js';
-import type { Delivery, DeliveryPage, DeliveryRepository, NormalizedListDeliveries, NotifyUserInput, PendingDelivery } from '../src/contract.js';
+import type { Delivery, DeliveryPage, DeliveryRepository, NormalizedListDeliveries, NormalizedSendMessage, PendingDelivery, ChannelSendContext } from '../src/contract.js';
 export declare class SupabaseDeliveryRepository implements DeliveryRepository {
     #private;
     private readonly client;
     constructor(client: SupabaseClient);
-    enqueue(userId: string, input: Required<NotifyUserInput>): Promise<Delivery>;
+    enqueue(userId: string, computerId: string | undefined, input: NormalizedSendMessage, context: ChannelSendContext): Promise<Delivery>;
     list(userId: string, query: NormalizedListDeliveries): Promise<DeliveryPage>;
     get(userId: string, deliveryId: string): Promise<Delivery | null>;
     claim(limit: number, leaseSeconds: number): Promise<readonly PendingDelivery[]>;
-    complete(item: PendingDelivery, providerId: string, now: Date): Promise<boolean>;
+    markSent(item: PendingDelivery, providerId: string, now: Date): Promise<boolean>;
     fail(item: PendingDelivery, error: string, now: Date): Promise<boolean>;
+    nextWorkAt(): Promise<Date | null>;
 }

package/dist/host/repository.js

@@ -4,10 +4,12 @@ export class SupabaseDeliveryRepository {
     constructor(client) {
         this.client = client;
     }
-    async enqueue(userId, input) {
+    async enqueue(userId, computerId, input, context) {
         return delivery(await this.#rpc('enqueue_amalgm_channel_delivery', {
             p_user_id: userId,
+            p_computer_id: computerId ?? null,
             p_delivery: input,
+            p_session_id: context.sessionId ?? null,
         }));
     }
     async list(userId, query) {
@@ -39,6 +41,7 @@ export class SupabaseDeliveryRepository {
         });
         return rows.map((row) => {
             const title = optional(row.title);
+            const replyToMessageId = optional(row.reply_to_message_id);
             return {
                 id: text(row.id),
                 userId: text(row.user_id),
@@ -48,11 +51,19 @@ export class SupabaseDeliveryRepository {
                 idempotencyKey: text(row.idempotency_key),
                 leaseToken: text(row.lease_token),
                 attempts: number(row.attempts),
+                thread: {
+                    id: text(row.thread_id),
+                    sessionId: text(row.session_id),
+                    subject: text(row.thread_subject),
+                    messageId: text(row.rfc_message_id),
+                    ...(replyToMessageId ? { replyToMessageId } : {}),
+                    references: strings(row.references),
+                },
             };
         });
     }
-    complete(item, providerId, now) {
-        return this.#rpc('complete_amalgm_channel_delivery', {
+    markSent(item, providerId, now) {
+        return this.#rpc('mark_amalgm_channel_delivery_sent', {
             p_delivery_id: item.id,
             p_lease_token: item.leaseToken,
             p_provider_id: providerId,
@@ -67,6 +78,10 @@ export class SupabaseDeliveryRepository {
             p_now: now.toISOString(),
         });
     }
+    async nextWorkAt() {
+        const value = await this.#rpc('next_amalgm_channel_delivery_at', {});
+        return value ? new Date(value) : null;
+    }
     async #rpc(name, arguments_) {
         const { data, error } = await this.client.rpc(name, arguments_);
         if (error) {
@@ -81,6 +96,8 @@ function delivery(row) {
     const title = optional(row.title);
     const providerId = optional(row.provider_id);
     const error = optional(row.error);
+    const threadId = optional(row.thread_id);
+    const sessionId = optional(row.session_id);
     return {
         id: text(row.id),
         channel: 'email',
@@ -94,10 +111,13 @@ function delivery(row) {
         ...(optional(row.delivered_at) ? { deliveredAt: timestamp(row.delivered_at) } : {}),
         ...(providerId === undefined ? {} : { providerId }),
         ...(error === undefined ? {} : { error }),
+        ...(threadId === undefined ? {} : { threadId }),
+        ...(sessionId === undefined ? {} : { sessionId }),
     };
 }
 const text = (value) => typeof value === 'string' ? value : String(value ?? '');
 const optional = (value) => typeof value === 'string' && value ? value : undefined;
 const number = (value) => Number(value) || 0;
 const timestamp = (value) => new Date(String(value)).toISOString();
+const strings = (value) => Array.isArray(value) ? value.map(text).filter(Boolean) : [];
 //# sourceMappingURL=repository.js.map